Portage

Privacy

What is stored, why each thing is needed, how long it is kept, and how to take it with you or delete it.

Last updated 16 August 2026 · contact laszlobrianczako@gmail.com

The short version. Portage stores what it needs to price a trip from your front door and nothing else: your airports, your driving costs, your constraints, and the searches you have run. It is never sold, never shared with advertisers, and never used to place a paid result in a ranking. You can export all of it at any time in one call, and deleting your account deletes it.

What is collected, and why

Every item below exists because a specific calculation needs it. Where a field is missing, Portage says so and refuses to guess rather than filling the gap with an assumption.

What	Why it is needed
Home currency, cost per km, value of an hour	The landed cost is fare plus driving plus parking plus border. Without your own per-kilometre cost the drive cannot be priced; without your hourly value no trade between time and money can be offered.
Your airports	Drive time, distance, parking rate and border pattern for each airport you would actually use. This is the whole product: an airport nobody can reach is not an option.
Constraints and preferences	Things you have said once so you are not asked again — no redeyes, a passport expiry, a card with no foreign-transaction fee, memberships and entitlements you hold.
Searches and trips	So an answer can be re-shown, a receipt can name the search it belongs to, and a watch can be compared against what you were told before.
Watches	A saved query and the price bar it has to clear before you are told anything.
Prices and exchange rates	Fares fetched from the fare provider, with the moment each was true. Not personal: a fare from Hamilton to Nashville is a fact about the market, is shared across everyone in a region, and carries no link to who asked.
Field reports	Only what you choose to submit — what a border wait or a parking lot was actually like — so the next person gets a better number.
Account identifier	Issued at sign-in so your rows can be told from anybody else's.

What is never collected

No payment details. Portage never sells tickets and is never the merchant of record, so there is no card on file and no checkout to protect.
No passport, NEXUS or membership numbers. Portage records that you hold something, because it changes the answer. The number itself buys nothing and is not asked for.
No location tracking. The starting point is an airport you told it about, not a device position.
No advertising, analytics or tracking scripts. The site loads no third-party code at all — enforced by a Content-Security-Policy header, not merely intended.

Who it is shared with

Nobody, with two named exceptions, and neither receives anything about you.

The fare provider. To price a trip, the airports, the destination and the dates are sent to a flight-price service. No identifier, no name, no account is sent with it — only the query.
Hosting and database. Netlify runs the server and Supabase stores the rows. They hold the data to provide the service and process it on our instructions.

Your data is never sold, never licensed, and never used for advertising. Portage does not accept payment for placement in any ranking, and no result is ever ordered by anything other than what a trip costs you.

Where it is held, and for how long

Rows are held in Supabase (Postgres). Row-level security is applied to every table, so a request can only ever read rows belonging to the account that made it.
Your data is kept until you delete it. It is not aged out on a schedule, because a constraint you set two years ago is still true and a catchment does not expire.
Deleting your account deletes your rows. Removal from live systems is immediate; encrypted backups age out within 30 days.
Cached fares are replaced as they are refreshed and are not tied to any person.
Access tokens are signed rather than stored, and expire on their own.

Taking it with you

Export is a feature, not a request form. Ask for export in the conversation and everything comes back at once — profile, airports, constraints, prices, searches, trips, watches — as JSON or CSV, immediately, with no ticket to open and nobody to email. A hub you cannot leave is a trap, and this was built on the first day rather than added after somebody asked.

Your rights

Wherever you live, you can ask for a copy of your data, have it corrected, have it deleted, or object to how it is handled. Export covers the first of those instantly; for the rest, write to laszlobrianczako@gmail.com and expect a reply within 30 days. If you are in the UK, EU, or a Canadian province with its own privacy legislation, you also have the right to complain to your local regulator.

Security

Everything is served over HTTPS. There is no unencrypted endpoint.
Sign-in uses OAuth 2.1 with PKCE. Anything secret is stored hashed with SHA-256, never in the clear.
The server fails closed: if its signing configuration is absent it refuses every request rather than falling back to something weaker.
The pages load no external scripts, fonts, or images.

Children

Portage is not directed at children under 13 and does not knowingly collect their data.

Changes

If this policy changes in a way that affects what is collected or who it is shared with, the date at the top changes and the change is described here rather than made quietly.